Lost password

'admin'"); while($row0 = mysql_fetch_array($result0, MYSQL_NUM)) { $v0=$row0[0]; $u0=base64_decode($row0[1]); $v_email=$row0[2]; } $count = mysql_num_rows($result0); if ($count==0) { $result1=mysql_query("select distinct uname, passwd from authuser where email='$v_email'"); while($row1 = mysql_fetch_array($result1, MYSQL_NUM)) { $v1=$row1[0]; $u1=base64_decode($row1[1]); } } if(($u0=='')&&($u1=='')) { $flag=1; $msg1= "No username or email address matches, please try again."; } elseif ($u0<>'') { $pass=$u0; $username=$v0; } elseif ($u1<>'') { $pass=$u1; $username=$v1; } if ($pass<>'') { //send email for lost password $result=mysql_query("select subject,contents from emailtemplates where name='lostpass'"); while($row = mysql_fetch_array($result, MYSQL_NUM)) { $v_subject=trim($row[0]); $v_message=nl2br(trim($row[1])); } $subject = "$v_subject"; $headers = "From: $v_emailfrom\r\n"; $headers .= "MIME-Version: 1.0\r\n"; $headers .= "Content-Type: text/html; charset=iso-8859-1\r\n"; $v_message = ereg_replace("\\<%username%>","$username",$v_message); $v_message = ereg_replace("\\<%password%>","$pass",$v_message); $v_message = ereg_replace("\\<%weburl%>","$url_root",$v_message); mail($v_email, $v_subject, $v_message, $headers); $getip=getip(); mysql_query("insert into log (uname,ctime,ip,activity) values ('$username',now(),'$getip','Send password to member($username).')"); $flag=2; $msg2="Please check your email for the login information."; } mysql_close($connection); } function getip() { if (getenv(HTTP_X_FORWARDED_FOR)) { $ip=getenv(HTTP_X_FORWARDED_FOR); } else { $ip=getenv(REMOTE_ADDR); } return $ip; } ?>